CISD DevSecOps Capability Support Service

The Department for Education is responsible for children's services and education, including early years, schools, higher and further education policy, apprenticeships and wider skills in England. Cyber and Information Security Division (CISD) is a centralised function within DfE that uses people, processes, technology, and intelligence to identify and respond to operational cyber threats. The Department is facing increasing demands to secure systems, applications, and infrastructure against evolving threats. As cyber threats are becoming more sophisticated more advanced security practices such as DevSecOps and continuous monitoring are required. We are looking to put in place a commercial agreement for specialists to work closely in multi-disciplinary teams with other suppliers and civil servants to augment our Cyber Security capabilities within CISD. The resources required will

be to support the integration of automated security controls into pipelines, enabling shift left security and secure by design practices and supporting development teams with secure tooling and configuration. The services aim to improve automation and operational security effectiveness across all digital platforms and services.